Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa
File:                     8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa (raw, json)
Hash identifier:          3BJWqFBcET/L6WbX1heubYVhU9d8ZcacT1n5kV86u4k=
Subject key identifier:   50:02:06:1E:A6:24:9F:38:5F:A8:A9:B1:2F:FC:BB:14:6E:D2:36:8E
Certificate issuer:       /CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
Certificate serial:       16AC0A
Authority key identifier: 4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa
Signing time:             Mon 10 Jul 2023 15:05:40 +0000
ROA not before:           Sun 09 Jul 2023 15:05:39 +0000
ROA not after:            Thu 10 Jul 2025 15:05:39 +0000
asID:                     271821
IP address blocks:        192.100.198.0/24 maxlen: 24
                          2801:10:6800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485834 (0x16ac0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ebe91dc23a981293baadb7c6ae73c111d36d98be
        Validity
            Not Before: Jul  9 15:05:39 2023 GMT
            Not After : Jul 10 15:05:39 2025 GMT
        Subject: CN=8ea89d98e2528e3dd8ce6927d392c5b4525ead10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6a:1b:c7:65:91:a9:47:d1:1c:e0:2c:1a:19:
                    59:b1:bc:42:8a:eb:b9:57:76:7e:c1:12:29:67:9c:
                    f2:74:b8:6d:df:b8:0b:c2:a4:ae:29:f3:93:28:a3:
                    07:b5:1d:cc:cd:11:18:3c:c9:7f:6c:ae:b2:21:af:
                    89:7c:a4:24:25:35:e8:05:87:b3:e7:04:e4:3a:6b:
                    3c:93:7c:27:50:ea:aa:0e:98:85:f6:3c:b1:0f:22:
                    b6:33:cc:48:c7:52:f5:00:a1:a8:c8:ad:2d:46:41:
                    ed:0d:7f:6b:8e:9f:34:00:f6:5d:62:34:94:51:83:
                    68:3d:f3:18:40:07:c5:4f:48:ed:50:55:6e:9d:19:
                    2d:27:89:5d:b4:64:7d:65:ea:f9:59:95:62:22:cb:
                    f4:37:24:a1:7a:02:32:56:c6:bb:73:a2:2f:fb:93:
                    6f:ed:10:31:76:58:56:a6:5b:09:0e:fc:6e:1b:47:
                    f0:88:73:95:7a:db:98:fb:4a:97:dc:89:6c:fb:b0:
                    d3:35:ab:c1:89:9e:ba:62:c5:d7:31:0f:77:1f:f4:
                    c8:e5:ee:3c:dd:8d:22:2d:4c:62:76:96:a5:a6:c0:
                    7b:33:58:b0:75:e7:8b:27:92:65:71:42:83:8f:0c:
                    c1:2c:33:2e:23:04:b4:bb:b3:ee:20:77:b9:c2:7a:
                    be:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:02:06:1E:A6:24:9F:38:5F:A8:A9:B1:2F:FC:BB:14:6E:D2:36:8E
            X509v3 Authority Key Identifier:
                keyid:4B:97:F4:90:08:9F:01:73:35:E2:F9:68:85:0F:3E:CC:64:E5:A5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ebe91dc23a981293baadb7c6ae73c111d36d98be.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/8ea89d98e2528e3dd8ce6927d392c5b4525ead10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/4b77b809-dcf8-48ee-8baf-f75e35b5ecba/ebe91dc23a981293baadb7c6ae73c111d36d98be.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.198.0/24
                IPv6:
                  2801:10:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:d3:31:5d:ec:5f:5f:1e:14:0e:03:81:07:cd:23:cb:e6:92:
         2b:de:6b:af:44:46:eb:f7:55:5a:1c:43:2a:a4:f4:ca:4a:ce:
         5a:7a:d1:07:28:c2:87:97:8f:d2:61:88:64:aa:6e:f5:9d:eb:
         50:d0:c2:28:9c:61:61:db:02:61:19:db:82:a7:b0:26:61:b5:
         44:a7:d6:53:e7:66:c6:34:4f:cf:26:54:e0:42:3b:a8:6c:46:
         0f:2a:72:6a:a3:75:7f:94:50:e4:d6:3a:93:ad:f6:c6:dd:24:
         19:44:e4:75:4e:eb:13:85:df:d0:3a:39:68:43:58:93:1e:e7:
         45:12:fa:04:3a:81:33:3d:d4:b7:8b:a3:98:af:18:ca:fa:a8:
         50:ba:7a:32:f5:c8:33:45:c8:d1:d5:80:f3:d4:0a:fa:d1:72:
         f0:98:ad:39:9c:9d:0f:e8:34:0e:a4:18:32:80:54:d5:0a:c0:
         d2:66:62:6a:2b:03:a4:f0:fa:3b:f4:97:1e:30:0c:90:a1:9f:
         13:d8:67:5f:4d:92:b6:58:9a:30:63:28:a2:de:ce:d2:d1:d4:
         d5:e7:2f:f5:28:aa:63:d3:bf:6d:ae:5f:46:be:f6:f7:0c:19:
         a4:7a:02:fb:bf:04:8e:46:9f:e7:88:8b:77:fd:b4:72:54:02:
         cf:76:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----